1. Data controller
Precedo Inversiones S.L., tax ID B76138932 (VIES: ESB76138932), with registered address at C. Aguadulce 13, Portal 3, 2ºE, 35004 Las Palmas de Gran Canaria, Spain, is the controller of the personal data collected through domaincuore.com. For any matter concerning data protection you may write to hi@domaincuore.com.
2. Purposes of processing
- User account management and authentication Creation, maintenance and security of access to the platform, email verification, password recovery and prevention of unauthorised access.
- Execution of domain purchase and sale Processing of orders, escrow management, delivery of authCode, handling of incidents and traceability of the operation.
- Invoicing and compliance with legal obligations Issuing invoices, bookkeeping, responding to tax and regulatory authorities, retention of documentation for the legally established terms.
- Customer support Resolving queries, incidents, complaints and exercising rights.
- Fraud and abuse prevention Detection of fraudulent operations, identity theft attempts, platform misuse and money laundering.
- Communications Only when the user has expressly consented: sending commercial communications, newsletters and surveys. Consent may be withdrawn at any time.
3. Legal basis for processing
The above processing is grounded, as applicable, on: (a) the performance of the purchase or service agreement; (b) compliance with legal obligations (tax, accounting, data-protection and anti-money-laundering); (c) DomainCuore’s legitimate interest in maintaining the security and proper operation of the platform and in preventing fraud, balanced with the data subject’s rights; and (d) the data subject’s express consent for purposes that require it, such as commercial communications and the optional use of non-strictly-necessary cookies.
4. Data retention
Data is retained while the contractual relationship is in force and, afterwards, for the term required by applicable regulations (as a rule, 4 years for accounting obligations in Spain and 5 years for anti-money-laundering regulations). Invoicing and payment-traceability data may be kept for up to 10 years under tax regulations. After these periods, data is erased or irreversibly anonymised.
5. Processors (third parties)
To provide the service, DomainCuore relies on the following processors, with whom data-processing agreements under Article 28 GDPR have been formalised:
- Stripe Payments Europe Ltd. Card payment processing and dispute handling. Processor located in the USA/Ireland, with EU Standard Contractual Clauses for international transfers.
- Brevo (Sendinblue SAS) Transactional email delivery. Processor located in France (EU).
- OVH SAS / OVH Hispano SLU Hosting of infrastructure, database and outbound email. Processor located in France and Spain (EU).
- DonDominio (Ubilibet S.L.) Domain registrar and SMTP provider. Processor located in Spain (EU).
- GoTrue (self-hosted by DomainCuore) Authentication service and JWT issuance, installed and operated by DomainCuore on its own infrastructure hosted with OVH. It does not share data with the original software provider.
6. Automated decisions and profiling
DomainCuore does not make individual automated decisions with legal or significant effects on the data subject. Anti-fraud checks generate alerts that are reviewed by authorised personnel before any action that could affect the user is taken.
7. Data-subject rights (ARSOPL) and how to exercise them
The user may at any time exercise their rights of Access, Rectification, Erasure, Objection, Portability and Restriction (ARSOPL) by sending a request to hi@domaincuore.com, accompanied by a copy of an identity document. The request must clearly identify the data subject and the right being exercised. DomainCuore will respond within a maximum period of one month from receipt, extendable by two months where complexity so justifies it, after notifying the data subject. The data subject may also lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid (www.aepd.es).
8. Changes to this policy
DomainCuore may modify this policy to adapt it to legislative or judicial developments. Where the changes are material, the user will be informed by a visible notice on the website or, where appropriate, by email. Users are encouraged to review this page periodically.